Privacy Policy

Information you give us

• Contact details you submit through our forms — name, email address, company, role.
• Answers to optional qualifying questions (for example company size, or whether you currently run outreach).
• Anything you tell us during a booked call.

Information collected automatically

• Standard web analytics: pages viewed, referring URL, approximate region, device and browser type.
• UTM campaign parameters attached to links you clicked, so we know which content brought you here.

Information from connected third-party accounts

If you connect a social media account to our publishing tools, we receive the profile and channel data that platform's API returns, plus tokens that let us publish on your behalf. See section 4.

We do not knowingly collect information from anyone under 16.

• To deliver what you asked for — the free guide, our newsletter, and follow-up emails.
• To schedule and hold sales calls.
• To measure which content and campaigns work, in aggregate.
• To operate, secure and improve our services.
• To meet legal obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

We rely on consent for marketing email (withdrawable at any time), legitimate interests for analytics and service security, and contract where we are delivering a service you requested.

ColdBot's publishing tools use YouTube API Services to upload and manage videos on YouTube channels that the account owner has explicitly connected and authorised.

• By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service.
• Google's handling of data is governed by the Google Privacy Policy.
• We request access only to upload and manage content on channels you connect, and to read that channel's own performance metrics. We do not access, store or analyse other users' YouTube data.
• Stored credentials are limited to the OAuth access and refresh tokens needed to publish on your behalf. They are encrypted at rest and never shared.
• You can revoke our access at any time via the Google security settings page at myaccount.google.com/permissions, or by disconnecting the channel inside our tool. Revoking access deletes the stored tokens.
• Channel data we cache for scheduling and reporting is deleted within 30 days of disconnection.

The same principles apply to any other social platform you connect (LinkedIn, Instagram, Facebook): we use the access only to publish content you or your operator scheduled, and to read back that content's performance.

We share data only with service providers who process it on our instructions: Resend (email delivery), Amazon Web Services (hosting and storage), Vercel (website hosting), Cloudflare (DNS and network security), Cal.com (scheduling sales calls), and Google/YouTube, LinkedIn and Meta (publishing content to channels you connect).

Marketing contacts are kept until you unsubscribe or ask for deletion, and reviewed every 24 months. Analytics data is retained in aggregate. OAuth tokens are deleted on disconnection.

You can request access, correction, deletion, export, or restriction of your personal data, and object to direct marketing. Email hassan@coldbot.pro and we will respond within 30 days. Every marketing email carries a one-click unsubscribe link. UK/EU residents may complain to their local data protection authority.

Data is transmitted over TLS and stored on access-controlled infrastructure. Credentials and tokens are encrypted at rest. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you of a breach affecting your data where the law requires it.

We operate from Pakistan and use providers in the EU and United States. Where data leaves the UK/EU we rely on the provider's Standard Contractual Clauses or equivalent safeguards.

We will update the date at the top of this page when this policy changes. Material changes affecting how we use your data will be notified by email where we hold your address.